Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File:                     bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier:          mCOyiEvqs3rku7v8+nv7wcE1NdaTCoSiC8qVLXs68Ks=
Subject key identifier:   E6:1E:23:1A:D6:BD:B3:45:7D:F6:A4:83:C8:B5:E5:CF:5E:D9:AE:E9
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer:       /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial:       01962ECF5BDC55894C83E62EAD566E071564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: o8LUZDwEfUN1IqpLBhzZ2//T8U/aA3pZqFk/BvTW6bk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5b:dc:55:89:4c:83:e6:2e:ad:56:6e:07:15:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=e61e231ad6bdb3457df6a483c8b5e5cf5ed9aee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:43:0f:89:cd:f6:69:9b:95:37:eb:4b:42:
                    e7:9f:58:ff:c2:fb:2b:40:2c:73:a9:14:e9:53:87:
                    d9:ac:0e:2a:22:4c:81:d5:bf:96:61:15:3c:1c:67:
                    c5:9b:95:e7:d3:25:cb:18:0a:db:36:c2:14:8b:9a:
                    1f:bb:ae:36:2f:92:a2:0d:ee:df:60:ba:61:bb:e4:
                    98:8c:97:69:32:7a:84:ad:c0:22:65:b4:db:57:94:
                    db:8d:ea:cf:68:52:6a:41:14:42:6b:b1:97:ce:d1:
                    8e:bf:8d:e2:4b:7f:4f:b8:47:f5:b9:4c:6a:37:f2:
                    7b:31:83:b6:db:e1:78:3c:62:71:37:68:e4:62:e6:
                    69:3f:e3:0c:0f:e6:9a:22:60:e6:12:c8:13:37:cc:
                    3b:86:9c:bb:ba:61:cf:3b:25:ae:66:aa:39:0d:22:
                    80:67:d5:1d:b7:8d:d5:f2:02:6b:b5:ec:4f:8d:30:
                    4e:86:ee:97:79:7d:93:d9:6e:6e:42:a2:a0:bd:7f:
                    23:01:74:cf:93:30:18:fa:70:a1:b6:8e:2c:0a:0e:
                    36:a1:35:05:9b:bb:3d:f6:39:48:d1:3b:ea:40:a0:
                    44:e9:11:ba:80:0f:f7:08:58:8b:95:23:fc:91:3a:
                    0b:be:34:77:13:a4:d7:bf:fa:72:8c:f5:9f:cb:7c:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1E:23:1A:D6:BD:B3:45:7D:F6:A4:83:C8:B5:E5:CF:5E:D9:AE:E9
            X509v3 Authority Key Identifier:
                keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:01:4d:59:ad:d8:04:cc:2f:df:2d:07:f7:9a:7f:77:b4:86:
         82:63:a7:dc:73:e8:d0:f0:1e:57:1a:09:33:26:a9:a3:26:4b:
         ab:e5:4d:01:3c:43:ad:9e:d0:6c:46:bd:73:fb:3a:a9:db:91:
         76:40:94:8b:73:dc:ab:9a:2a:12:12:06:7b:94:28:26:2f:20:
         6c:56:0c:e0:1c:88:d8:66:d2:07:7a:e2:ba:3f:7c:96:d7:d8:
         e2:81:89:fc:93:b8:af:32:1a:19:bf:31:43:3d:fe:7b:40:d3:
         80:e7:da:83:c9:6b:43:31:9c:17:10:3b:e4:73:1c:52:c6:57:
         c2:02:d8:f0:d3:22:a2:83:44:8f:02:b8:05:f4:f2:04:5a:70:
         1f:38:ae:6b:63:2c:36:b1:42:4c:fa:90:fe:c1:be:3d:3b:6c:
         0a:99:09:b8:b4:bf:72:d2:3f:eb:30:0a:05:8f:98:c6:51:1d:
         13:73:e2:9c:79:25:a0:61:cc:6a:2a:66:dc:c2:b4:84:d8:5f:
         b8:90:4f:3e:9b:fc:35:a3:85:cd:37:cb:6a:d6:47:71:a9:c1:
         5e:10:7b:18:57:7b:c4:20:35:83:07:58:cd:fd:7f:75:8d:8d:
         22:85:b7:c9:a4:af:b4:90:d3:90:9b:ae:06:2d:d2:e1:52:1a:
         aa:cc:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----